A symbolic link (symlink) following issue exists in the `src/daemon/modules/spec/specs mount.c` file. An attacker who convinces a victim or platform to run a specially crafted malicious image can trick the iSulad daemon into copying sensitive host directories into an anonymous volume during container creation, allowing the container to read those files.